FakeTube.A

Its main aim is to spread itself via email in messages that contain links to erotic videos of celebrities like Britney Spears and Paris Hilton.

Affected platforms:

Windows 2003/XP/2000/NT/ME/98/95

First detected on:

Dec. 21, 2009

Detection updated on:

Dec. 23, 2009

Statistics

No

Brief Description

FakeTube.A is a worm whose main aim is to spread itself via email in messages that contain links to erotic videos of celebrities like Britney Spears and Paris Hilton.

Additionally, it creates the necessary files and Windows Registry entries to register itself as a service in order to be automatically run whenever Windows is started.

Visible Symptoms

FakeTube.A is easy to recognize, as it spreads via email in message with erotic content about celebrities like Britney Spears and Paris Hilton, whose names have been replaced with "Britney Spirs" and "Peris Hilton" respectively in these emails.

The message has the following characteristics:

Subject: it can contain texts like the following:Giga Video Movie Britney Spirs and 8 Beverage Andorran

Stimulating Image Britney Spirs and One Manifest South Korean

Message: it contains a link to an erotic video of any of these celebrities. The link redirects users to a website imitating YouTube's, like the following: